Privacy Statement

How do we use your information?

CILIP recognises that your privacy is important to you and is committed to protecting your privacy online. This privacy notice sets out what information we collect and why and how we use that information.

CILIP processes data in accordance with the UK General Data Protection Regulation, the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations (PECR). Data Protection law says that the personal information we hold about you must be:

• Used lawfully, fairly and in a transparent way.
• Collected only for valid purposes that we have clearly explained to you and not used in any way that is incompatible with those purposes.
• Relevant to the purposes we have told you about and limited only to those purposes.
• Accurate and kept up to date.
• Kept only as long as necessary for the purposes we have told you about.
• Kept securely.
• In addition to this, the ‘Accountability Principle’ requires that we take responsibility for how we comply with the principles and demonstrate that compliance.
• The CILIP is a "data controller". This means that we are responsible for deciding how we hold and use personal information about you. We are required under data protection legislation to notify you of the information contained in this privacy notice.
• CILIP is registered with the Information Commissioners Office (ICO) under The Chartered Institute of Library and Information Professionals Z5659864 and Cilip Pathways Limited ZB353900.
• It is important that you read and retain this notice, together with any other privacy notice we may provide on specific occasions when we are collecting or processing personal information about you, so that you are aware of how and why we are using such information and what your rights are under the data protection legislation.
• The type of data we collect and our legal basis for processing this data is set out as follows. Any special category data will be processed in line with our Appropriate Policy Document

The CILIP is a "data controller". This means that we are responsible for deciding how we hold and use personal information about you. We are required under data protection legislation to notify you of the information contained in this privacy notice.

CILIP is registered with the Information Commissioners Office (ICO) under The Chartered Institute of Library and Information Professionals Z5659864 and Cilip Pathways Limited ZB353900.

It is important that you read and retain this notice, together with any other privacy notice we may provide on specific occasions when we are collecting or processing personal information about you, so that you are aware of how and why we are using such information and what your rights are under the data protection legislation.

The type of data we collect and our legal basis for processing this data is set out as follows.

Visitors to our website (members or non-members)

We use a third-party service, Your Membership to publish and host the main CILIP website. When someone visits cilip.org.uk, a third-party service, Google Analytics, is used to collect internet log information and to follow visitor patterns. By knowing the number of visitors to the various pages, we can improve the website and identify areas of particular interest. The information is processed in a way which does not identify individuals. If we are collecting personally identifiable information through our website, we will do so using forms that clearly explain what we intend to do with it. Your Membership’s Privacy Notice is here.

We also use a third-party service, WordPress, to publish the libraries rewired website and it is hosted by 20i. When someone visits www.librariesrewired.org.uk , a third-party service, Burst Insights, is used to collect internet log information and to follow visitor patterns. By knowing the number of visitors to the various pages, we can improve the website and identify areas of particular interest. The information is processed in a way which does not identify individuals.

Filling in forms: Most forms on www.cilip.org.uk (for example the Contact Us form, event registrations, training queries, applying for professional registration), are managed through Your Membership, our website third party service above. However, some forms still link to a different third-party service, MS365 Forms or Formsite. We will only request the information needed to provide the service.

Social buttons: Visitors may use these to bookmark or share our web pages. There are buttons for: X, Share, Facebook Share, Instagram, Flickr, and LinkedIn Share. These work using scripts from domains outside of CILIP and it is likely those sites will collect their own information about what you are doing. You should review the policies of each of these sites to see how they use your information and to find out how to opt out, or delete, such information.

Social Media Contact with CILIP: CILIP uses X. If you intend to post a comment on our X feed, X will require you to set up your own account. Please review the X privacy notice to see how it uses your information and to find out how to opt out, or delete, such information. Direct messages sent to CILIP’s X account will be deleted after 1 year.

External web services. We use a number of external web services, mainly related to displaying content e.g. to display slideshows we sometimes use SlideShare; to show videos we use YouTube and Vimeo. This is not an exhaustive or complete list of the services we use, or might use in the future, when embedding content, but these are the ones we use most. As with social buttons we cannot prevent these sites, or external domains, from collecting information on your usage of this embedded content. If you are not logged in to these external services then they will not know who you are, but are likely to gather anonymous usage information e.g. number of views, plays, loads etc.

Other CILIP Websites: CILIP is responsible for several other websites that you can link to from our main website:

http://cilipconference.org.uk/ CILIP’s annual conference.

http://www.facetpublishing.co.uk/ The commercial publishing and bookselling arm of CILIP

http://carnegies.co.uk/ The Carnegies are the UK's oldest and most prestigious children's book awards.

https://librariesweek.org.uk/ Green Libraries week is an annual event showcasing UK libraries.

https://www.informationprofessionaljobs.com/ The CILIP listing of the latest Library & Information jobs.

Libraries Rewired is the UK’s leading digital transformation event for the library, information and knowledge community.

Links to other websites: Our website also contains links to other websites that may be of interest to our visitors. However, once you have used these links to leave our site, this privacy statement no longer applies, and we cannot be responsible for the protection and privacy of any information which you provide whilst visiting those sites - such sites are not governed by this privacy statement. Again, please check the respective policies of any such sites that you chose to visit.

Our legal basis for processing the data described above is our legitimate interest in keeping our website and services relevant so that we can develop and grow our organisation; as well as a legitimate interest in keeping an appropriate record of any communications entered into with those visiting our website and social media platforms.

Members (anyone who has full membership with a login for CILIP)

For Members (anyone who has a membership login to CILIP) CILIP is the data controller for the information you provide during the membership unless otherwise stated. If you have any queries about membership, please contact us .

Our legal basis for processing the data described below is the performance of a contract to manage and administer your membership of CILIP and to deliver member benefits to you; as well as a legitimate interest in keeping an appropriate record of any communications entered into with members and in keeping up to date member records.

What will we do with the information you provide to us?

Data we hold will be used to help us run our services and keep you informed - for example, to collect subscriptions, mail out publications and let you know about conferences and events; or to fulfil legal or regulatory requirements if necessary.

We will use the other information you provide to represent the sector, e.g. to compile sector demographics – you would not be identifiable individually, but such information enables us to more effectively advocate for the sector. We may also use relevant information (e.g. sector or level of membership) to advise you of products and services that may be of interest.

CILIP will never sell, trade, rent, exchange or otherwise share your personal information with any other person, company or organisation without gaining consent to do so. The information you provide will be held securely by us and/or our data processors, whether the information is in electronic or physical format. We do not collect more information than we need to fulfil our stated purposes and will not retain it for longer than is necessary.

Joining as a member

If you use our online registration system, this will be collected by a data processor on our behalf.

We ask you for your personal details including name and contact details. We will also ask you about your professional details and questions relevant to the sector. Our administration and management teams will have access to all of this information.

You will also be asked to provide equalities and demographic information. This is not mandatory information – if you don’t provide it, it will not affect your membership. This information will not be made available to any staff outside of our administration and management teams, in a way which can identify you. Any information you do provide, will be used only to produce and monitor equalities statistics and demographics for the sector.

Member login information, comprising of name or username, email address, and password is collected/created. There is also the option to sign in using your social profile on Facebook (YM SocialLink will receive your public profile, friends list and email address from Facebook) or LinkedIn (YM SocialLink will receive your name, photo, headline, current positions and primary email from LinkedIn). These work using scripts from domains outside of CILIP and it is likely those sites will collect their own information about what you are doing. You should review the policies of each of these sites to see how they use your information and to find out how to opt out, or delete, such information.

Further details are then collected in the member profile. The information is used to provide access to the member-only areas of the website and other member-only benefits. The services and information available to you will be governed by the type of membership that you have with us.

Your personal information is also used to track your website preferences and keep you informed, unless you have opted not to receive such communications. In some instances, when a purchase is initiated by a member, billing information, that may include credit card information, is captured.

Membership database: Your membership information is held by a third party processor Your Membership (YM, owned by Community Brands) who provide this online service for us.

Here is a link to their Privacy Notice: https://www.yourmembership.com/legal/

CILIP Devolved Nation or Regional Member Networks, or Special Interest Groups : If members have joined CILIP Devolved Nation or Regional Member Networks, or Special Interest Groups, their contact data (email and postal), may be shared with those local committees (taking into account any communication preferences stated by that member), so that they can send newsletters and information about their activities. CILIP volunteers who will be in receipt of personal information are asked to read and sign a Data Protection Agreement first – for example if they are on a group committee, they are sending out email communications or organising events.

SocialLink: As well as a member profile, you will have access to a private, member-facing online community called SocialLink where you will be able to network with other CILIP members. You can post to your own feed; connect with other members; and can join regional and special interest groups. Participation in Social Link is entirely optional, but by default your name and profile picture (if you choose to upload one) are visible to other CILIP members on SocialLink. If you’d like other members on SocialLink to know more about you – such as your X name and employer’s name – you need to change your privacy settings in your profile and also make a connection to that person. Instructions on changing your privacy settings and making connections are here .

Register of Practitioners: As a CILIP member and as stated in our membership terms and conditions , the Institute will publish a Register of Members containing the names of all members and identifying their category of membership and identifying those who are Registered Practitioners.

Professional Registration: If you apply for certification, chartership, fellowship or revalidation with CILIP you will create a portfolio for assessment.

When individuals submit their profile on the CILIP website, it will then be made accessible to The Professional Registration Panel (PRP) who are responsible for assessing all submissions made at Certification, Chartership and Fellowship level as well as all Revalidation portfolios. The portfolio will only be kept in that location for three years after submission and will then be deleted. Schema sheets for marking will be kept for 10 years.

Any personal information that is provided to CILIP and the PRP, who volunteer as assessors on CILIP’s behalf, are used only for the purpose of reviewing the professional registration submission.

There is an optional form that can be submitted by candidates who have a disability or neurodiversity that allows the individual to make an impact statement.

If this form is submitted CILIP will be processing health data about the individual and health data is a special category of data under UK GDPR. This requires an additional legal basis for processing which for the health data alone is explicit consent.

The information in the form will only be shared with CILIP staff and the PRP as needed.

Federation for Informatics Professionals (FEDIP): If you apply for inclusion on the FEDIP register, your first name, last name, CILIP membership number, level of membership and email address will be shared with FEDIP and all of these items (except email address) will be publically available on the FEDIP online register. FEDIP’s Privacy Notice is here.

Professional Knowledge and Skills Base (PKSB): the PKSB is a career development tool for members to record their professional development progress – members login with the email they provide in their Member Profile. The PKSB is hosted on a WordPress site and managed by FAT Promotions. When a CILIP member joins, they can sign in with their email and create a new password. Please see Wordpress’s privacy notice here and FAT Promotion’s privacy notice here .

Voting on official CILIP matters: as a CILIP member you are entitled to vote in our annual elections for new trustees and for CILIP’s next Vice-President. CILIP use Mi-Voice who act as returning officer, officially validating the result and answering any queries. In order to do this they are sent the name, membership number and address (email or postal) of current members.

Here is a link to their privacy notice .

CILIP Magazine App: Once downloaded, the CILIP magazine app will give you online access to content, by logging in with the email provided in your Member Profile. When a CILIP member joins, they can sign in with their email and create a new password – please see YUDU’s privacy notice here.

Digital Membership Packs: On joining and at renewal, members will be sent a link to a Digital Membership Pack, including a Digital Membership card, that they can access at anytime. This service is provided by Orion Print – their Privacy Notice is here .

Access to Online Journals:One of the benefits of joining CILIP is access to Library and Information Science Abstracts (LISA), Proquest Library Science and SAGE journals (Journal of Information Science (JIS), Journal of Librarianship and Information Science (JOLIS), Health Informatics Journal and IFLA Journal). As these are accessed after a member has logged in to the CILIP website, the member’s name, username and email address are extracted via the SSO (single sign on) process, to verify and administer access to these journals only.

However, once you have used the SSO to leave our site, this privacy statement no longer applies and we cannot be responsible for the protection and privacy of any information which you provide whilst visiting those journals - please check their privacy notice.

CILIP Benevolent Fund: The Benevolent Fund is an independent charity (Registered charity number 237352) with its own Trustees. However, CILIP has webpages for the fund on its main website and take donations on their behalf. When you make a donation to the fund through the CILIP website, your contact details (name, address or email) and the amount of the donation, will be shared with the Chair of the fund so that they can process and acknowledge the donation. If you are applying to the fund for help (it is a requirement that the applicant is a current member) and submit the contact form online, that form can be accessed by CILIP administrators and management, however they are unlikely to do so and the form details will be forwarded to the fund chairman and trustees to process and if successful, provide help to the applicant in the strictest confidence.

Volunteers: As a member you may either be a CILIP volunteer, or interact with CILIP volunteers (who may or may not be CILIP members themselves). If CILIP volunteers will have access to personal information, it will be appropriate to their role and they will have been asked to sign a data protection agreement. This list is not exhaustive, but volunteers include CILIP Board members; Member Network Committee members; the PRP; Mentors; Professional Registration Support Officers; and Assessors for Course Accreditation.

Paying for your membership: If you use a credit or debit card to pay, you will be redirected to a third party service, PaySafe, who collect payment on CILIP’s behalf. They will request card number, expiry date and the contact details of the person and address that the card is registered to.

Their privacy notice is here .

If you pay by direct debit, (in monthly or annual instalments), your instalments will be processed and collected on our behalf by Clear Direct Debit. Your bank details (bank address, sort code and account number) are stored by Clear Direct Debit.

Their privacy notice is here .

How long is the information retained for?Once you cease to be a member, your membership profile and details of financial transactions made with CILIP, will be retained for 7 years. If you decide to rejoin, your original profile will be made active again, if still on record. We will stop all communications with you after one year, or as soon as you unsubscribe, whichever is sooner.

Registrations for events or training (members or non-members)

If registering for an event or training, additional information such as dietary or access requirements may be collected, but will only be used for that particular event. If a member is signed in, relevant contact information from their member profile may be pre-filled to speed up the registration process for them.

We use a third party service, Your Membership (owned by Community Brands), to publish and host event details and tickets on the main CILIP website. When someone visits www.cilip.org.uk, a third party service, Google Analytics, is used to collect internet log information and to follow visitor patterns. By knowing the number of visitors to the various pages, we can improve the website and identify areas of particular interest. The information is processed in a way which does not identify individuals. If we are collecting personally identifiable information through our website, we will do so using forms that clearly explain what we intend to do with it.

Your Membership’s Privacy Notice is here .

Some event details may be published and hosted using an alternative to Your Membership, for example CILIP Member Network events using EventBrite. Please note that once you have used these links to leave our site, this privacy statement no longer applies and we cannot be responsible for the protection and privacy of any information which you provide whilst visiting those sites to register for events - such sites are not governed by this privacy statement. Again, please check the respective policies of any such sites that you choose to visit.

Webinars:Personal data during webinars - CILIP Webinars are recorded and shared with members and are sometimes made public, including any questions asked by participants during the webinar. When participating in a CILIP webinar the name you enter when you log in is displayed to other participants - you may just want to give your name as "Participant". If you type any questions into the text chat your screen name will be displayed with the question.

Training: CILIP uses third parties to deliver training courses for organisations and CILIP members. Those trainers are under contract to CILIP and may be given the names and emails of the individuals attending the course they are delivering, so that they can create attendance registers, to facilitate learning and to gather feedback. Those personal details will only ever be used for the course being delivered and once the course has ended, trainers are instructed not to retain those details for any purpose.

Our legal basis for processing the data described above is our legitimate interest in facilitating the event or training for the attendees; as well as a legitimate interest in keeping an appropriate record of any communications entered into with those attendees.

People who pay for CILIP products or services using credit or debit cards (members or non-members)

If a visitor to our website decides to use a credit or debit card to pay for products or services or donations, you will be redirected to a third party service, PaySafe, who collect payment on CILIP’s behalf.

They will request card number, expiry date and the contact details of the person and address that the card is registered to. Their privacy notice is here .

This could include payment for items like event tickets, membership, professional registration fees, donations, products such as books, but this list is not exhaustive.

Sometimes, payments are taken by the CILIP finance department, directly into our bank account using a PDQ machine. They will request card number, expiry date and the security code. They will also ask for a name and telephone number in case of any query.

Our legal basis for processing the data described above is Contractual in terms of completing the financial transaction with our customer; as well as a legitimate interest in the administration of that service e.g. to recover a debt due to us or to study how our customers use our products and services, so we can develop and improve them.

People who complete polls and surveys (members or non-members)

We will periodically carry out anonymous polls and surveys on our website. However, we regularly conduct sector research through the use of online surveys. For sector research surveys, the identities of respondents and their answers will be treated as confidential and will only be used for research purposes, unless the correspondent expressly requests or permits otherwise. For surveys that are not anonymous we may cross-reference your responses with information that we already hold about you. This would be for research purposes only.

We may occasionally carry out market research with our members and non-members regarding the member services and benefits we currently offer or may wish to offer in future.

For mixed purpose projects, the purpose(s) will be stated on the questionnaire. For all online surveys participation is voluntary at all times.

We will use either the survey functionality of Your Membership (see the section on Visitors to our website) or Survey Monkey. If Survey Monkey is used, this will be made clear to you and in setting up the survey we might include optional boxes for your name and email.

Our legal basis for processing the data described above is legitimate interest in understanding and advocating for our sector and customers and so we can develop and improve our services.

People applying or nominating for CILIP awards or bursaries (members or non-members)

Nominations or applications for awards or bursaries may require additional information about both the nominator and/or possible recipient.

Any personal information that is provided in the nomination, is used only for the purpose of reviewing the nomination and for the ongoing administration and management of any bursaries that are awarded. We may also publish information about awards or bursaries on our own website, including the recipient of the award or bursary and the amount of bursary awarded.

Our legal basis for processing the data described above is our legitimate interest in managing and administering the award or bursary; as well as a legitimate interest in keeping an appropriate record of any communications entered into with those recipients.

Emails that we send (to members and non-members)

Emails that we send to members and non-members: CILIP uses a third party provider, DotDigital, to deliver the majority of our emails, although some standard notifications will come from Your Membership. DotDigital is also used to manage your email preferences, if you have stated on your member profile that you are happy for CILIP to contact you by email. You will see an option to manage your email preferences at the end of every email sent from DotDigital where you can subscribe/unsubscribe. This list is not exhaustive, but such emails may be about membership administration and benefits, newsletters, communications from member network groups that you have joined, events, sector & policy research, job alerts or products such as books.

Email tracking.Some emails that we send you have no tracking in at all, for example personal correspondence. Other emails we send are tracked so that we can tell if those emails send traffic to our website or we can tell, at an individual level, whether the user has opened and clicked on the email, to understand open and click rates to try and improve our emails. Sometimes we do use the personal information e.g. to re-email people who haven’t opened emails. If you want to be sure that none of your email activity is tracked, then you should unsubscribe from all CILIP email correspondence.

DotDigital's Privacy Notice is here .

Our legal basis for sending emails is legitimate interest where it concerns the administration of correspondence or a financial or membership transaction. For marketing emails our basis is consent.

We may contact corporate contacts with unsolicited marketing. Our legal basis for this is legitimate interests and we comply with the Privacy and Electronic Marketing regulations (PECR) by only contacting corporate subscribers and always offering an opt out. If you do not wish to receive marketing emails, please contact us dataprotection@cilip.org.uk .

Carnegie Judges

The Carnegie Medals are awarded annually by CILIP to authors and illustrators of books for children and young people that create outstanding reading experiences through writing or illustration.

As part of the awards CILIP invites individuals to apply to be part of the judging panel, to facilitate this we collect judges: Name, job title, email address, CILIP membership number (if applicable), membership of CILIP’s Youth Libraries Group (if applicable), YLG Region, and information relating to the knowledge, experience and suitability for the role of Carnegies Judge.

Our legal basis for this is legitimate interest in promoting the Carnegie awards.

As part of CILIPs wider commitment to equality and diversity we also ask for personal data revealing racial or ethnic origin, personal data revealing religious or philosophical beliefs, data concerning physical or mental health and/or personal data concerning an individual’s sexual orientation.

Our legal basis for this is your explicit consent.

Please see our separate privacy notice for the other data collection relating to the awards The Carnegies

Prospective, Current and Former Employees and Volunteers

please see our separate privacy notice.

Security

CILIP complies with its obligations under the UK General Data Protection Regulation (UK GDPR), by keeping personal data up to date; by storing and destroying it securely; by not collecting or retaining excessive amounts of data; by protecting personal data from loss, misuse, unauthorised access and disclosure and by ensuring that appropriate technical measures are in place to protect personal data.

Only authorised employees and data processors (software suppliers and those working on behalf of CILIP e.g. Devolved Nations, Member Networks, Mentors, Assessors, Facet Publishing, to deliver our products and services) will have access to your data. All parties who have access to your data are required to process/use that data in accordance with the provisions of current data protection legislation and CILIP’s Data Protection Policy.

CILIP uses data processors who are third parties to provide elements of our services for us. We have contracts in place with our data processors. This means that they cannot do anything with your personal information unless we have instructed them to do it. They will not share your personal information with any organisation apart from us. They will hold it securely and retain it for the period we instruct. We have identified these data processors where relevant in the body of this privacy notice.

CILIP will never sell trade, rent, exchange or otherwise share your personal information with any other person, company or organisation without gaining consent to do so.

The CILIP website uses sophisticated security and safeguard measures to protect users' information (e.g. Secure Sockets Layer (SSL) encryption) to ensure that your data, debit/credit card will be protected against fraudulent use on our site.

Retention of Data

We will only keep your information for as long as we need it to manage the relationship we have with you, based on the parameters of that relationship, or for as long as we are legally required to.

We have retention schedules that set out how long we keep information. When we dispose of your data it will be done securely.

There may be instances where data is kept indefinitely in line with the provisions of the GDPR that do not apply to data processed for research or for archiving in the public interest.

Cookies

Cookies are small text files that are placed on your computer by websites that you visit. They allow the website to remember who you are. They are widely used in order to make websites work, or work more efficiently, as well as to provide information to the owners of the site.

You have the ability to accept or decline cookies by modifying the settings in your browser. However, you will not be able to login to the website if cookies are disabled. You can also manually remove cookies from your system. For more information on disabling and enabling cookies you should search for or lookup 'Cookies' in your Operating System Documentation or visit www.aboutcookies.org

Cookies set by CILIP:

Cookie	Name	Purpose
Universal Analytics (Google)	_ga _gali _gat_UA-1036645-1 _gid	These cookies are used to collect information about how visitors use our website. We use the information to compile reports and to help us improve the website. The cookies collect information in an anonymous form, including the number of visitors to the website, where visitors have come to the website from and the pages they visited. You can find out more at www.google.co.uk/intl/en/analytics/privacyoverview.html
YouTube cookies	PREF* VSC* VISITOR_INFO1_LIVE* remote_sid *	We embed videos from our official YouTube channel using YouTube’s privacy-enhanced mode. This mode may set cookies on your computer once you click on the YouTube video player, but YouTube will not store personally-identifiable cookie information for playbacks of embedded videos using the privacy-enhanced mode. Read more at YouTube’s embedding videos information page. PREF - * Expires after eight months VSC - * expires at the end of your session VISITOR_INFO1_LIVE - *expires after eight months remote_sid - * expires at the end of your session

Controlling your personal information

Personal data relates to a living individual who can be identified from that data. Identification can be by the information alone or in conjunction with any other information in the data controller’s possession or likely to come into such possession. The processing of personal data is governed by the General Data Protection Regulation 2016/679 (the GDPR).

This privacy notice was drafted with brevity and clarity in mind. It does not provide exhaustive detail of all aspects of CILIP’s collection and use of personal information. However, we are happy to provide any additional information or explanation needed. Any requests for this should be sent to the address below or using this contact form .

Data Rights

Under the UK GDPR and the Data Protection Act 2018, you have the following rights:

• Right to be informed: This notice provides you with information in relation to how your data is processed. This ensures that we are transparent about what we will do with the information you supply to us.
• Right of Access: You can ask us to provide you with the personal data about you we hold. This right always applies. There are some exemptions, which means you may not always receive all the information we process.
• Right to rectification: You have the right to ask us to rectify information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete. This right always applies.
• Right to erasure: You have the right to ask us to erase your personal information in certain circumstances.
• Right to object: You have the right to object to processing if we are able to process your information because it is in our legitimate interests. You can also unsubscribe from our mailings and remove your details at any time.
• Right to data portability: This only applies to information you have given us. You have the right to ask that we transfer the information you gave us from one organisation to another or give it to you. The right only applies if we are processing information based on your consent or under, or in talks about entering into a contract and the processing is automated.

Should you wish to make a subject access request to view your personal data held by us or exercise any of your rights, please contact dataprotect@cilip.ac.uk

If any of your personal details are incorrect, please write to us or use the contact form , so that we can make any corrections promptly. Members are asked to review their data at least once a year on renewal.

If you want to make a complaint about the way CILIP has processed your personal information, you can contact the ICO in the UK as the statutory body which oversees data protection law – www.ico.org.uk/concerns .

Access to personal information

Members have an online login that will allow them to update their membership profile online at anytime – login or reset your password here .

You can review the email preferences that we hold for CILIP communications here and for Devolved Nations, Regional Member Networks and Special Interest Groups here and you can change them at any time.

If you are a member you can change your communication preferences for Social Link at any time – please see the instructions here and see the section on “Information and Settings”.

Identity and contact details of controller:CILIP is the controller and processor of data for the purposes of the GDPR.

Contact Us

CILIP is committed to processing personal data fairly and lawfully. If you have queries or concerns, please contact us at dataprotection@cilip.org.uk and we’ll respond.

If you remain dissatisfied, you can make a complaint about the way we process your personal information to the Information Commissioners Office (ICO). Please follow this link to the ICO website for more information https://ico.org.uk/make-a-complaint/. Or contact them at ico.org.uk or

Information Commissioner’s Office

Wycliffe House

Water Lane

Wilmslow

Cheshire

SK9 5AF

Changes to this privacy policy

CILIP may change this policy from time to time by updating this page. You should check this page from time to time to ensure that you are happy with any changes. This policy was last updated 8 August 2024.

Legal Basis: Overview

Processing	Legal Basis
Staff s	Contract: pre contract tasks and then performing the contract that is entered into. Legal obligation: for example, reporting to HMRC Vital interests: sharing information with emergency services when consent cannot be sought
Volunteers	Contract: pre contract tasks and then performing the contract that is entered into. Vital interests: sharing information with emergency services when consent cannot be sought
Visitors to our website (members or non-members)	Legitimate Interests: in keeping our website and services relevant so that we can develop and grow our organisation; as well as a legitimate interest in keeping an appropriate record of any communications entered into with those visiting our website and social media platforms.
Updating Members	Legitimate interest: in keeping an appropriate record of any communications entered into with members and in keeping up to date member records.
Administration of Membership	Performance of a contract: to manage and administer your membership of CILIP and to deliver member benefits to you
Registrations for events or training (members or non-members)	Legitimate interest: in facilitating the event or training for the attendees; as well as a legitimate interest in keeping an appropriate record of any communications entered into with those attendees.
People who pay for CILIP products or services using credit or debit cards (members or non-members)	Performance of a contract: in terms of completing the financial transaction with our customer
People who pay for CILIP products or services using credit or debit cards (members or non-members)	Legitimate interest: in the administration of that service e.g. to recover a debt due to us or to study how our customers use our products and services, so we can develop and improve them.
People who complete polls and surveys (members or non-members)	Legitimate interest in understanding and advocating for our sector and customers and so we can develop and improve our services.
People applying or nominating for CILIP awards or bursaries (members or non-members)	Legitimate interest: in managing and administering the award or bursary; as well as a legitimate interest in keeping an appropriate record of any communications entered into with those recipients.
Emails that we send (to members and non-members)	Legitimate interest: where it concerns the administration of correspondence or a financial or membership transaction.
Emails that we send (to members and non-members) for Marketing	Consent: For marketing emails our legal basis is consent.